The paper studies the essence and diagnostics of internal and external threats to enterprise security. External threats to the enterprise are identified, in particular, unfavorable changes in the political and economic situation in the country, the use of unfair competition methods, unreliability of suppliers, partners and contractors, natural and technical emergencies, unauthorized access of competitors to confidential information of the enterprise, imperfection of the regulatory framework, industrial and economic espionage, changes in consumer tastes and preferences. The author identifies internal threats to the enterprise, in particular, low professional level of the top management of the enterprise, violation of labor discipline, outflow of qualified personnel, decrease in the professional qualification level of personnel, violation of the regime of commercial secrecy, low level of innovation activity of the enterprise, lack of an effective planning system at all levels, low technical and technological levels of production. The author analyzes what negative consequences can result from threats to the security of an enterprise from its administrative and managerial staff and personnel in general, suppliers and other contractors and consumers. The author identifies the tools whose implementation can preventively influence key business processes and minimize negative consequences in the event of threats. As for the tool that has effectively proven itself among enterprises in developed countries and is used to support the internal environment in terms of developing managerial and human resources, it is worth noting the corporate entrepreneurship assessment tool (CEAI). As for the tool that is actively used, including by domestic entrepreneurs, to collect and analyze customer data, which allows storing information about the history of interaction with customers and increasing their loyalty, it is worth mentioning a CRM system.